利用 AWS 签名：安全 REST API 身份验证指南

import java.nio.charset.standardcharsets;
import javax.crypto.mac;
import javax.crypto.spec.secretkeyspec;
import java.security.signatureexception;

public class awssignature {
    public static void main(string[] args) throws exception {
        string accesskey = "your_access_key";
        string secretkey = "your_secret_key";
        string service = "service_name";
        string region = "region_name";
        string method = "get";
        string uri = "/your/api/path";
        string host = "api.endpoint.com";

        // create the date and time
        string date = "date"; // format: yyyymmdd
        string amzdate = "amz_date"; // format: yyyymmdd't'hhmmss'z'

        // create canonical request
        string canonicalrequest = createcanonicalrequest(method, uri, host, amzdate);
        string stringtosign = createstringtosign(date, region, service, canonicalrequest);
        string signature = calculatesignature(secretkey, stringtosign, date, region, service);

        // create the authorization header
        string authorizationheader = "aws4-hmac-sha256 credential=" + accesskey + "/" + date + "/" + region + "/" + service + "/aws4_request, "
                + "signedheaders=host;x-amz-date, signature=" + signature;

        // use the authorization header in your http request
        system.out.println("authorization header: " + authorizationheader);
    }

    // placeholder for createcanonicalrequest, createstringtosign, and calculatesignature methods
}

package main

import (
    "crypto/hmac"
    "crypto/sha256"
    "encoding/hex"
    "fmt"
    "time"
)

func calculateSignature(secretKey, stringToSign string) string {
    mac := hmac.New(sha256.New, []byte(secretKey))
    mac.Write([]byte(stringToSign))
    return hex.EncodeToString(mac.Sum(nil))
}

func main() {
    accessKey := "YOUR_ACCESS_KEY"
    secretKey := "YOUR_SECRET_KEY"
    method := "GET"
    uri := "/your/api/path"
    host := "api.endpoint.com"
    region := "REGION_NAME"
    service := "SERVICE_NAME"

    date := time.Now().UTC().Format("20060102")
    amzDate := time.Now().UTC().Format("20060102T150405Z")

    canonicalRequest := createCanonicalRequest(method, uri, host, amzDate)
    stringToSign := createStringToSign(date, region, service, canonicalRequest)
    signature := calculateSignature(secretKey, stringToSign)

    authorizationHeader := fmt.Sprintf("AWS4-HMAC-SHA256 Credential=%s/%s/%s/%s/aws4_request, SignedHeaders=host;x-amz-date, Signature=%s",
        accessKey, date, region, service, signature)

    // Use the authorization header in your HTTP request
    fmt.Println("Authorization Header:", authorizationHeader)
}

// Placeholder for createCanonicalRequest and createStringToSign methods